Oracle SOA Suite vulnerabilities

35 known vulnerabilities in Oracle SOA Suite from Oracle. 35 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

35vulnerabilities

18critical

17high

0exploited

8.9average CVSS score

Latest first

9.9 Critical severity
Oracle SOA Suite: Improper Access Control
CVE-2026-91251Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to
9.9 Critical severity
Oracle SOA Suite: Improper Privilege Management
CVE-2026-91250Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via multipl
8.8 High severity
Oracle SOA Suite: Missing Authentication for Critical Functionality
CVE-2026-91239Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via mul
7.1 High severity
Oracle SOA Suite: Uncontrolled Resource Consumption
CVE-2026-91238Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTT
7.5 High severity
Oracle SOA Suite: Missing Authentication for Critical Functionality
CVE-2026-91237Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT
9.8 Critical severity
Oracle SOA Suite: Improper Authentication
CVE-2026-91236Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT
9.8 Critical severity
Oracle SOA Suite: Improper Authentication
CVE-2026-91235Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT
9.8 Critical severity
Oracle SOA Suite: Improper Authentication
CVE-2026-91234Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT
9.8 Critical severity
Oracle SOA Suite: Improper Authentication
CVE-2026-91233Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo
9.9 Critical severity
Oracle SOA Suite: Improper Access Control
CVE-2026-91232Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTT
10.0 Critical severity
Oracle SOA Suite: Missing Authentication for Critical Functionality
CVE-2026-91231Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
9.3 Critical severity
Oracle SOA Suite: Missing Authentication for Critical Functionality
CVE-2026-91230Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT
7.5 High severity
Oracle SOA Suite: Improper Access Control
CVE-2026-91229Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via H
7.1 High severity
Oracle SOA Suite: Incorrect Authorization
CVE-2026-91228Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTT
7.5 High severity
Oracle SOA Suite: Improper Access Control
CVE-2026-91227Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via H
7.5 High severity
Oracle SOA Suite: Improper Access Control
CVE-2026-91226Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via H
9.1 Critical severity
Oracle SOA Suite: Missing Authentication for Critical Functionality
CVE-2026-91225Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
9.9 Critical severity
Oracle SOA Suite: Improper Access Control
CVE-2026-91224Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTT
8.8 High severity
Oracle SOA Suite: Improper Access Control
CVE-2026-91223Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTT
10.0 Critical severity
Oracle SOA Suite: Improper Access Control
CVE-2026-91221Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3
8.6 High severity
Oracle SOA Suite: Missing Authentication for Critical Functionality
CVE-2026-91219Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT
9.6 Critical severity
Oracle SOA Suite: Incorrect Authorization
CVE-2026-91218Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTT
8.6 High severity
Oracle SOA Suite: Missing Authentication for Critical Functionality
CVE-2026-91217Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT
10.0 Critical severity
Oracle SOA Suite: Missing Authentication for Critical Functionality
CVE-2026-91216Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3
8.8 High severity
Oracle SOA Suite: Improper Access Control
CVE-2026-91215Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTT
9.8 Critical severity
Oracle SOA Suite: Improper Authentication
CVE-2026-91214Oct 20, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT
8.8 High severity
Oracle SOA Suite: Improper Access Control
CVE-2026-61002Aug 18, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP
7.7 High severity
Oracle SOA Suite: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2026-60548Jul 21, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with networ
7.2 High severity
Oracle SOA Suite: Improper Privilege Management
CVE-2026-60546Jul 21, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with netwo
8.2 High severity
Oracle SOA Suite: Missing Authentication for Critical Functionality
CVE-2026-60544Jul 21, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP
8.1 High severity
Oracle SOA Suite: Missing Authentication for Critical Functionality
CVE-2026-60543Jul 21, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HT
9.8 Critical severity
Oracle SOA Suite: Improper Access Control
CVE-2026-60541Jul 21, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo
9.6 Critical severity
Oracle SOA Suite: Improper Access Control
CVE-2026-60540Jul 21, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with networ
8.8 High severity
Oracle SOA Suite: Missing Authentication for Critical Functionality
CVE-2026-60539Jul 21, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with networ
9.8 Critical severity
Oracle SOA Suite: Missing Authentication for Critical Functionality
CVE-2026-60538Jul 21, 2026Oracle
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo